phishing

Cybercriminals are building phishing pages that exist only inside victims’ browsers

Barracuda Networks, cybercrime, Microsoft Teams, News, phishing /

Cybercriminals are building phishing pages that exist only inside victims’ browsers 2026-09-10 at 10:14 By Sinisa Markovic A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a […]

Cybercriminals are building phishing pages that exist only inside victims’ browsers Read More »

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser

Featured, phishing /

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser 2026-09-09 at 13:00 By Kevin Townsend Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no static website to detect or block. The post New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser appeared first […]

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser Read More »

Trezor customers hit with phishing calls and letters after shipping-partner breach

Cryptocurrency, data breach, Don't miss, Hot stuff, News, phishing, QR codes, Trezor /

Trezor customers hit with phishing calls and letters after shipping-partner breach 2026-09-08 at 14:30 By Zeljka Zorz Roughly 67,000 more customers of SatoshiLabs, the maker of hardware crypto-wallet Trezor, are at heightened risk of phishing attacks after their names, email addresses, phone numbers, and shipping addresses were exposed. “The leaked information could be used for […]

Trezor customers hit with phishing calls and letters after shipping-partner breach Read More »

IT help-desk vishing tricks executives into handing over Microsoft 365 access

Arctic Wolf Networks, cybercrime, Microsoft 365, News, phishing /

IT help-desk vishing tricks executives into handing over Microsoft 365 access 2026-09-08 at 14:17 By Sinisa Markovic IT help-desk vishing calls, stolen session tokens, and sign-ins routed through residential proxies are behind a wave of data theft and extortion against Microsoft 365 and other SaaS accounts, according to Arctic Wolf. The company is tracking the […]

IT help-desk vishing tricks executives into handing over Microsoft 365 access Read More »

Microsoft Teams is about to make QR code phishing much harder

cybersecurity, Microsoft Teams, News, phishing, QR codes /

Microsoft Teams is about to make QR code phishing much harder 2026-09-04 at 11:28 By Sinisa Markovic Microsoft is preparing a new feature for Teams users that will help them stay safe from QR code phishing. Teams will automatically hide QR codes sent by people outside the organization. Users will need to reveal the image […]

Microsoft Teams is about to make QR code phishing much harder Read More »

Attackers are going after prominent individuals through OAuth phishing, FBI warns

cybercrime, FBI, News, OAuth, phishing /

Attackers are going after prominent individuals through OAuth phishing, FBI warns 2026-09-02 at 13:58 By Sinisa Markovic Attackers are targeting prominent individuals, their relatives and personal contacts to gain persistent access to their accounts, including private emails and files, the FBI has warned. The FBI’s Internet Crime Complaint Center (IC3) says the activity, which uses […]

Attackers are going after prominent individuals through OAuth phishing, FBI warns Read More »

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

cybercrime, Microsoft Teams, News, Palo Alto Networks, phishing, social engineering /

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks 2026-09-01 at 17:07 By Sinisa Markovic A coordinated voice-phishing (vishing) campaign, named Spring Ring, used fake IT support accounts on Microsoft Teams to trick employees into installing malware or granting remote access to their computers, according to Unit 42, Palo Alto Networks’ […]

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks Read More »

AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes

apple, cybercrime, mobile security, News, phishing, SOCRadar /

AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes 2026-08-26 at 15:46 By Sinisa Markovic A phishing-as-a-service (PhaaS) platform called AnonyMousKIT is automating the theft of Apple ID credentials needed to remove Activation Lock from stolen iPhones, SOCRadar found. “By leveraging a critical flaw – the use of bare relative paths – the investigation […]

AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes Read More »

Bogus recruiters go after high-value corporate credentials on mobile

mobile security, News, phishing, scams, Zimperium /

Bogus recruiters go after high-value corporate credentials on mobile 2026-08-26 at 13:05 By Sinisa Markovic Scammers posing as HR staff at well-known companies are running interview scheduling scams that end with a stolen corporate password, according to Zimperium. Attackers are using a technique called browser-in-the-browser, or BitB, which CTM360 documented in earlier research on recruitment […]

Bogus recruiters go after high-value corporate credentials on mobile Read More »

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack

breach, News, phishing, ReliaQuest, social engineering, SOCRadar /

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack 2026-08-25 at 12:24 By Sinisa Markovic Cybersecurity company ReliaQuest has confirmed that one of its own employees fell for a social engineering attack, handing attackers a password and a brief window into the company’s identity system. The admission came after the extortion group […]

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack Read More »

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited

cybercrime, Data Breaches, phishing, ReliaQuest, ShinyHunters, social engineering /

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited 2026-08-24 at 20:38 By Eduard Kovacs A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. The post ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited Read More »

Fake bank websites play dead to evade security scanners

financial industry, Fortra, News, phishing, SEO /

Fake bank websites play dead to evade security scanners 2026-08-24 at 08:00 By Sinisa Markovic A phishing method, named Chameleon SEO Poisoning, that uses manipulated search results and cloaked fake banking websites to steal credentials while evading security scanners has been discovered by Fortra. The company’s threat intelligence unit, Fortra Intelligence and Research Experts (FIRE), […]

Fake bank websites play dead to evade security scanners Read More »

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets

phishing, phishing kit /

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets 2026-08-21 at 17:22 By Kevin Townsend Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked. The post New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets appeared first on SecurityWeek. […]

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets Read More »

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response

Brand Impersonation, Brand Monitoring, Dark Web Monitoring, Executive Monitoring, fraud, Managed Takedown, phishing, social engineering, Takedown Services /

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response 2026-08-18 at 05:23 By Mihir Bagwe Manual brand impersonation takedowns fail because attackers move faster than ticket-based abuse reports can resolve — phishing pages and fake executive profiles often do their damage within hours of going live, while manual removal can take days. A managed takedown program […]

Brand Impersonation Takedown: From Whack-a-Mole to Managed Response Read More »

SafePal breach affects 39,798 customers, data allegedly for sale

breach, Cryptocurrency, data breach, News, phishing /

SafePal breach affects 39,798 customers, data allegedly for sale 2026-08-17 at 13:29 By Sinisa Markovic Cryptocurrency wallet maker SafePal disclosed a data breach that exposed order information for 39,798 customers, including names, email addresses, shipping addresses, phone numbers and purchase details. The company traced the exposure to an authorization flaw in a plug-in used for […]

SafePal breach affects 39,798 customers, data allegedly for sale Read More »

Lazarus hackers pair fake job offers with Windows zero-day exploit

cyber espionage, fraud, Malware, News, North Korea, phishing /

Lazarus hackers pair fake job offers with Windows zero-day exploit 2026-08-12 at 14:48 By Sinisa Markovic The North Korea-linked Lazarus group is using fake job offers, trojanized PDF software and a Windows zero-day in attacks aimed primarily at the defense sector, Check Point researchers have found. The activity is part of Operation Dream Job, a […]

Lazarus hackers pair fake job offers with Windows zero-day exploit Read More »

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove

Don't miss, Hot stuff, Huntress, macOS, News, phishing, remote access, Windows /

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove 2026-08-05 at 11:43 By Zeljka Zorz A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it difficult to uninstall it. Different traps for Mac and Windows users By […]

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove Read More »

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware

cyber espionage, Microsoft, Microsoft 365, News, phishing, Russian Federation /

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware 2026-08-04 at 13:45 By Sinisa Markovic Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like hotels and conference centers, according to new findings from Microsoft […]

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware Read More »

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking

APT, Microsoft, Midnight Blizzard, Mobile & Wireless, phishing, Russia, Wi-Fi /

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking 2026-08-03 at 12:17 By Ionut Arghire Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations. The post Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking Read More »

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks

cybercrime, Email, Microsoft 365, News, phishing /

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks 2026-07-30 at 14:22 By Sinisa Markovic Attackers are moving away from fake Microsoft login pages in favor of abusing Microsoft’s own authentication system, letting phishing campaigns slip past the warning signs employees are trained to spot, according to Check Point. Between June 25 and […]

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks Read More »

Scroll to Top